Detections
Analytics

1.13 Schedule Configuration Backup Job

Information

Create a job to periodically backup the configuration to a remote server.

It is crucial to have remote backups of configuration files for several key reasons, especially in today's digital landscape:

 - Disaster Recovery and Business Continuity:

 - Protection Against Local Disasters: If your primary location experiences a disaster like fire, flood, or theft, having remote backups ensures your configuration files are safe and accessible from a different location.
 - Rapid Recovery: Remote backups allow you to restore systems quickly after a disaster, minimizing downtime and ensuring business continuity.
 - Part of a Comprehensive Plan: Remote backups are an essential component of a disaster recovery plan (DRP) and business continuity strategy.

 - Data Security and Redundancy:

 - Cyberattack Protection: Remote backups provide an extra layer of security, especially against ransomware and other cyber threats. If your primary systems are compromised, you can restore from clean backups.
 - Protection Against Hardware Failure and Human Error: Remote backups help you recover quickly from data loss due to hardware malfunctions, accidental deletions, or other human errors.
 - Geographical Redundancy: Storing backups in different locations protects against localized disruptions.

 - Operational Benefits:

 - Automated Backups: Remote backup services can be configured to run automatically, reducing manual effort and minimizing the risk of human error.
 - Scalability: Remote backup solutions, particularly cloud-based ones, offer scalability to accommodate increasing data storage needs.
 - Remote Access: You can access and restore your configuration files from anywhere with an internet connection, providing flexibility.

 - Compliance and Long-Term Preservation:

 - Meeting Regulatory Requirements: Some industries and regulations mandate the use of offsite backups for data retention and compliance purposes.
 - Long-Term Preservation: Remote backups help ensure the long-term preservation of data assets, safeguarding against corruption, hardware obsolescence, and technological advancements.

Solution

Create a job to backup the configuration to a remote server

switch(config)# job backup_config
switch(config-job-config_backup)# 1 cli copy running-config tftp://192.168.0.100/switch.cfg cli vrf mgmt

Schedule the job to run periodically:

switch(config)# schedule backup_config
switch(config-scheduler-backup_config)# 1 job backup_config
switch(config-scheduler-backup_config)# trigger every days 1 start 12:04 2024-03-18
switch(config-scheduler-backup_config)# enable
switch(config-scheduler-backup_config)# exit

Impact:

If no remote configuration backup strategy is implemented you can be exposed to issues with business continuity, disaster recovery and compliance.

See Also

https://workbench.cisecurity.org/benchmarks/24202

Item Details

Category: CONTINGENCY PLANNING

References: 800-53|CP-6, 800-53|CP-6(1), 800-53|CP-9, 800-53|CP-10, CSCv7|10.1, CSCv7|10.2, CSCv7|10.5

Plugin: ArubaOS

Control ID: 6c504ac183f44fd31f5cd27eac75990578f3e04e549bfea8cc04611439431b2c